Attorney's Docket No. 1032326-000388 
Application No. Unassiqned 
Page 3 



AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS : 

1 . (Currently Amended) A cryptographic method during which use is made of a 
random number generator producing random numbers .Sj of size N fixed between 0 and W-1 , 
in order to produce a random number R between 0 and a predefined limiter K, charact e ris e d 
m-that wherein : 

E31 : a random variable Sj between 0 and W-1 is produced, 
E32: if the random variable Sj is strictly less than a coefficient Kj of the limiter K in 
base W, then the coefficient R s of rank i of the random number R is equal to the random 
variable Sj and then, for any rank J less than i, a random variable Sj between 0 and W-1 is 
produced and Rj = Sj, 

E33: otherwise, if the said random variable is greater than the coefficient K } of rank i 
of the limiter K in base W, then the said coefficient R| is determined from the random variable 
Sj of rank i according to a predetermined function, and then the coefficient R M is determined 
for the random number R of rank i-1 that is immediately lower by repeating steps E31 to 
E33. 

2. (Currently Amended) A method according to claim [[2]] 1_, during which the 
following steps are performed: 

E1 : the limiter K is decomposed in base (W p ~\ W p " 2 W°) in the form 

'-° , i being a loop index, K| being a coefficient of the limiter K of rank i between 

0 and W-1 and p being the degree of the limiter K, 

E2: a Boolean variable f is initialised to TRUE, 

E3: the following operations are performed, in a loop indexed by i, i being an integer 

varying between p-1 and 0: 

E31: a random variable Si between 0 and [[W0-1]] W-1 is produced, 

E32: if the random variable Sj is strictly less than the coefficient K { of rank i, 

then the Boolean variable f is set to FALSE, 
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E33_1 : if the random variable Si is strictly greater than the coefficient Kj of 
rank i and the Boolean variable f is TRUE, then the coefficient Rj of rank i is determined from 
the random variable Sj of rank i according to a predefined function, 

E33_2: otherwise Rj = Sj 
E34: the loop i nd e x e d index i is decremented, 
E4: the random number R is determined by recombination of the random coefficients 

R^^R+W* 
Ri in base W according to the equation: <=° 

3. (Original) A method according to claim 2, during which, in order to determine the 
coefficient Rj of rank i from the random variable Sj of rank i (steps E33_1 and E33_2), the 
following substeps are performed: 

E33_1 1 : if the random variable Si is strictly greater than the coefficient Kj of the limiter 
K, then a new random variable Sj is produced, 

E33_12: step E33_1 1 is repeated until the random variable Sj is less than the 
coefficient K s of the limiter K, and then the coefficient Rj is equalised to the random variable 
Si. 

4. (Currently Amended) A method according to claim 2, during which the coefficient 
Ri of rank i is chosen (steps E33-1 and E33_2) equal to the part of the random variable Sj, 
the part less than the coefficient Kj, the said part corresponding to a limited number of bits of 
the variable Sj. 

5. (Original) A method according to claim 2, during which, in order to determine the 
coefficient Rj of rank i from the random variable S s of rank i (step E33), the random variable 
Sj is reduced modulo Kj+1, the result of the reduction being the coefficient sought. 

6. (Currently Amended) A method according to one of cla i ms 1 to 5 claim 2 , during 
which, in order to determine the coefficient Rj of rank i from the random variable Sj of rank i 
(step E33), steps E1 to E4 are executed using a base ((3 q1 , p°) as the calculation base, p 
being an integer strictly less than W and q being the degree of k in case p. 

7. (Currently Amended) A method according to claim 6, in which step E33 is broken 
down into the following substeps: 
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E33_41 : the coefficient Kj of rank i of the limiter K in base (p q "\ p°) in the form 

*.=£<*,)yV 

> =0 , j being a loop index, (Ki)j being a number between 0 and p-1 and q being 

a degree of the coefficient K if is decomposed, 

E33_42: a second Boolean variable g is initialised to TRUE, 
E33_43: the following operations are performed, in a loop indexed by j varying 
between q-1 and 0: 

E33_431: a random variable (Sj)j between 0 and p-1 is produced, 
E33_432: if the random variable (Si)] is strictly less than the coefficient (Kj)], 
then the second Boolean variable g is set to FALSE, 

E33_4331: if the random variable (Sj)j is strictly greater than the coefficient 
(Kj)j and the second Boolean variable g is TRUE, then a coefficient (Rj), is determined from 
the random variable (Sj)j according to a predefined function, 
E33_4332: otherwise, (Rj), = (S^ 
E33_434: the loop i nd e x e d index i is decremented, 
E33_44: the random number Rj is determined by recombination of the random 

coefficients (Rj)j in base p according to the equation: > =0 

8. (Currently Amended) An electronic component comprising a generator of random 
numbers of size N, calculation circuits performing in particular a comparison, a truncation 
and/or a modular reduction on numbers of no more than N bits, and a means of controlling 
the random number generator and calculation circuits, the said control means being adapted 
for implementing a method according to on e of cla i ms 1 to 7 claim 1 . 

9. (Currently Amended) A chip card comprising an electronic component according 
to th e pr e c e di n g c la im claim 1 . 

10. (New) A method according to claim 3, during which, in order to determine the 
coefficient Rj of rank i from the random variable Si of rank i (step E33), steps E1 to E4 are 
executed using a base (p q1 , p°) as the calculation base, p being an integer strictly less 
than W and q being the degree of k in case p. 
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1 1 . (New) A method according to claim 4, during which, in order to determine the 
coefficient Rj of rank i from the random variable Si of rank i (step E33), steps E1 to E4 are 
executed using a base (p q ~\ .... p°) as the calculation base, p being an integer strictly less 
than W and q being the degree of k in case p. 

12. (New) A method according to claim 5, during which, in order to determine the 
coefficient R| of rank i from the random variable S* of rank i (step E33), steps E1 to E4 are 
executed using a base (p q1 , .... p°) as the calculation base, p being an integer strictly less 
than W and q being the degree of k in case p. 

13. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 2. 

14. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 3. 

15. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 4. 

16. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 5. 
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17. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 6. 

18. (New) An electronic component comprising a generator of random numbers of 
size N, calculation circuits performing in particular a comparison, a truncation and/or a 
modular reduction on numbers of no more than N bits, and a means of controlling the 
random number generator and calculation circuits, the said control means being adapted for 
implementing a method according to claim 7. 



